微软70—646考试模拟题

2008 server

Number: 070-646 Passing Score: 800 Time Limit: 240 min File Version: 1.0

After 3 days of bickering over who is going to pay whom for the 70-646 With the Testlet answers I decided to end all of this, buy the PDF and make the VCE.

I hope you all do well on your Exam. Please people remember, we are all in the same boat here. If you have picked up even one Free test from Examcollection.com then you should have no reason to ask for any money when you pay for one.

Please keep in mind this VCE does have the answers to the testlets.... however... it does NOT have the testlet case studies that you will need to read to be able to understand the answers to these testlet questions. If someone gets the case studies and wants to modify my VCE please feel free to do so.

EXAM A - All 215 Questions

EXAM B - All questions not pertaining to Testlets.

Good Luck to you All!

-TheWolf

Sections

1. New Section

Exam A

QUESTION 1

You need to recommend a Windows Server 2008 R2 server configuration that meets the following requirements: ·Supports the installation（安装） of Microsoft SQL Server 2008 ·Provides redundancy（多余，剩余）for SQL services if a single server fails（失败） What should you recommend?

A. Install a Server Core（核心）installation of Windows Server 2008 R2 Enterprise on two

servers. Configure（配置，设定） the servers in a failovercluster（从，组）.

B. Install a full installation of Windows Server 2008 R2 Standard on two servers. Configure

Network Load Balancing（负载平衡）on the two servers.

C. Install a full installation of Windows Server 2008 R2 Enterprise on two servers. Configure

Network Load Balancing on the two servers.

D. Install a full installation of Windows Server 2008 R2 Enterprise on two servers. Configure

the servers in a failover cluster.

问题1

你需要一个Windows Server 2008推荐R2的服务器配置，能够满足以下要求： ?支持Microsoft SQL Server 2008安装

?为SQL服务冗余，如果一台服务器出现故障 你应该怎么建议？

答：服务器核心安装的Windows Server 2008 R2企业安装在两台服务器上。配置故障转移群集中的服务器。

B.安装的Windows Server 2008 R2标准在两台服务器上的完整安装。配置网络负载平衡的两个服务器。

C.安装的Windows Server 2008 R2企业在两台服务器上的完整安装。配置网络负载平衡的两个服务器。

D.安装的Windows Server 2008 R2企业在两台服务器上的完整安装。配置故障转移群集中的服务器。

Answer: D QUESTION 2

Your network consists of a single Active Directory domain. Your main office has an Internet connection.

Your company plans to open a branch office. The branch office will connect to the main office by using a WAN（广域网）link. The WAN link will have limited bandwidth.（带宽）The branch office will not have access to the Internet. The branch office will contain 30 Windows Server 2008 R2 servers. You need to plan the deployment of the servers in the branch office. The deployment must meet the following requirements: ·Installations must be automated.（自动化的） ·Computers must be automatically（自动化地，机械地）activated（有活性的）. ·Network traffic between the offices must be minimized（最小化的）. What should you include in your plan? A. In the branch office, implement（贯彻，实现，执行）Key Management（密钥管理） Service

(KMS), a DHCP server, and Windows Deployment（张开，部署，调度） Services (WDS windows部署服务).

B. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main

office, implement a DHCP server and Windows Deployment Services (WDS).

C. In the main office, implement Windows Deployment Services (WDS). In the branch office,

implement a DHCP server and implement the Key Management Service (KMS).

D. Use Multiple Activation Key (MAK) Independent Activation on the servers. In the main

office, implement a DHCP server. In the branch office, implement Windows Deployment Services (WDS).

您的网络由一个单一的活动目录域。您的主要办公室有一个Internet连接。

贵公司计划开设一分公司。该分公司将连接到主办公室通过使用一个广域网链接。广域网链路将是有限的带宽。该分公司将不能访问互联网。该分公司将包含30的Windows Server 2008 R2的服务器。你需要计划在分支机构的服务器部署。 部署必须满足以下要求： ?设施必须与自动化。 ?计算机必须被自动激活。

?办公室之间的网络流量必须减至最低。 你应包括在你的计划？

答：在分支办公室，实施密钥管理服务（KMS），一个DHCP服务器，Windows部署服务（WDS）。

B.使用多激活密钥（MAK）激活服务器上的独立。在主办公室，实行一个DHCP服务器和Windows部署服务（WDS）。

C.在主要办公，实施Windows部署服务（WDS）。在分支办公室，实行一个DHCP服务器和实施密钥管理服务（KMS）。

D.使用多激活密钥（MAK）激活服务器上的独立。在主办公室，实行一个DHCP服务器。在分支办公室，实现Windows部署服务（WDS）。

Answer: A QUESTION 3

Your network contains a Webbased application that runs on Windows Server 2003. You plan to migrate the Webbased application to Windows Server 2008 R2. You need to recommend a server configuration to support the Webbased application.

The server configuration must meet the following requirements: ·Ensure that the application is available to all users if a single server?fails ·Support the installation of .NET applications ·Minimize software costs

What should you recommend?

A. Install the Server Core installation of Windows Server 2008 R2 Standard on two servers.

Configure the servers in a Network Load Balancing cluster.

B. Install the full installation of Windows Server 2008 R2 Web on two servers. Configure the

servers in a Network Load Balancing cluster.

C. Install the full installation of Windows Server 2008 R2 Enterprise on two servers.

Configure the servers in a failover cluster.

D. Install the full installation of Windows Server 2008 R2 Datacenter on two servers.

Configure the servers in a failover cluster.

您的网络包含一个基于Web应用程序运行在Windows Server 2003。你计划的基于Web的应用程序迁移到Windows Server 2008 R2中。你需要一个服务器配置建议，以支持基于Web的应用。

服务器配置必须满足以下要求：

?确保应用程序适用于所有用户，如果一台服务器？失败

?支持的安装。NET应用程序 ?软件成本最小化 你应该怎么建议？

答：服务器核心安装的Windows Server 2008 R2标准安装在两台服务器上。配置在网络负载平衡群集的服务器。

B.安装的Windows Server 2008 R2的完整安装在两台服务器上的Web。配置在网络负载平衡群集的服务器。

C.安装的Windows Server 2008 R2企业在两台服务器上的完整安装。配置故障转移群集中的服务器。

D.安装的Windows Server 2008 R2数据中心在两台服务器上的完整安装。配置故障转移群集中的服务器。

Answer: B QUESTION 4

Your company purchases 15 new 64bit servers as follows: ·Five of the servers have a single processor. ·Five of the servers have a single dual core processor. ·Five of the servers have two quad core processors.

You plan to deploy Windows Server 2008 R2 on the new servers by using Windows Deployment Services (WDS). You need to recommend a WDS install image strategy that meets the following requirements: ·Minimizes the number of install images ·Supports the deployment of Windows Server 2008 R2

What should you recommend?

A. one install image file that contains three install images B. one install image file that contains a single install image

C. two install image files that each contain a single install image D. three install image files that each contain a single install image

您的公司购买15个新的64位服务器如下： ?在服务器中有五个一个处理器。 ?五的服务器有一个双核处理器。 ?五的服务器有两个四核处理器。

您计划部署使用Windows部署服务（WDS）的Windows Server 2008 R2的新的服务器上。您需要推荐形象战略的WDS安装符合下列要求： ?最小化安装的图像数

?支持Windows Server 2008 R2的部署

你应该怎么建议？

答：一个安装映像文件，它包含三个安装映像 B.一安装映像文件，它包含一个安装映像

C.两个安装映像文件，每个包含一个安装映像 D.三安装映像文件，每个包含一个安装映像

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 5

Your network contains a single Active Directory site.

You plan to deploy 1,000 new computers that will run Windows 7 Enterprise. The new computers have Preboot Execution Environment (PXE) network adapters.

You need to plan the deployment of the new computers to meet the following requirements: ·Support 50 simultaneous installations of Windows 7 ·Minimize the impact of network operations during the deployment of the new computers ·Minimize the amount of time required to install Windows 7 on the new computers What should you include in your plan?

A. Deploy the Windows Deployment Services (WDS) server role. Configure the IP Helper

tables on all routers.

B. Deploy the Windows Deployment Services (WDS) server role. Configure each WDS

server by using native mode.

C. Deploy the Windows Deployment Services (WDS) server role and the Transport Server

feature. Configure the Transport Server to use a custom network profile.

D. Deploy the Windows Deployment Services (WDS) server role and the Transport Server

feature. Configure the Transport Server to use a static multicast address range.

您的网络包含单个Active Directory站点。

您计划部署1000名新电脑将运行Windows 7企业。新电脑已预引导执行环境（PXE）网络适配器。

你需要计划的新电脑，以满足下列要求部署： ?支持50个同时安装的Windows 7

?减少网络运营过程中的新电脑部署的影响 ?减少所需的时间上的新电脑安装Windows 7 你应包括在你的计划？

答：部署Windows部署服务（WDS）服务器角色。配置在所有路由器的IP助手表。 二部署Windows部署服务（WDS）服务器角色。配置每个使用本机模式的WDS服务器。

三部署Windows部署服务（WDS）服务器传输服务器角色和功能。配置传输服务器使用自定义的网络配置文件。

四部署Windows部署服务（WDS）服务器传输服务器角色和功能。传输服务器配置为使用静态多播地址范围。

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 6

Your network consists of a single Active Directory site that includes two network segments. The network segments connect by using a router that is RFC 1542 compliant.

You plan to use Windows Deployment Services (WDS) to deploy Windows Server 2008 R2 servers. All new servers support PreBoot Execution Environment (PXE).

You need to design a deployment strategy to meet the following requirements: ·Support Windows Server?2008 R2 ·Deploy the servers by using WDS in both network segments ·Minimize the number of servers used to support WDS What should you include in your design?

A. Deploy one server. Install WDS and DHCP on the server. Configure the IP Helper tables

on the router between the network segments.

B. Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of

the network segments. Configure both servers to support DHCP option 60.

C. Deploy two servers. Install WDS and DHCP on both servers. Place one server on each of

the network segments. Configure both servers to support DHCP option 252.

D. Deploy two servers. Install WDS and DHCP on one server. Install DHCP on the other

server. Place one server on each of the network segments. Configure both servers to support DHCP option 60.

您的网络由一个单一的Active Directory站点，其中包括两个网段。该网络段连接使用的路由器是RFC 1542标准。 您计划使用Windows部署服务（WDS）来部署Windows Server 2008 R2的服务器。所有新的服务器支持预启动执行环境（PXE）。 你需要设计一个部署策略，以满足下列要求：

?支持Windows Server？2008 R2的 ?部署在这两个网段的使用WDS服务器 ?减少服务器的数量用于支持WDS的 你应包括在您的设计？

答：部署一台服务器。安装WDS和DHCP服务器上。配置上的IP助手网段之间的路由器表。

二部署两台服务器。安装WDS和DHCP两台服务器上。将一个网段上的每台服务器。配置两台服务器，支持DHCP选项60。 三部署两台服务器。安装WDS和DHCP两台服务器上。将一个网段上的每台服务器。配置两台服务器，支持DHCP选项252。 四部署两台服务器。安装WDS和DHCP一台服务器上。安装其他服务器上的DHCP。将一个网段上的每台服务器。配置两台服务器，支持DHCP选项60。

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 7

Your company has 250 branch offices. Your network contains an Active Directory domain. The domain controllers run Windows Server 2008 R2. You plan to deploy Readonly Domain Controllers (RODCs) in the branch offices.

You need to plan the deployment of the RODCs to meet the following requirements: ·Build each RODC at the designated branch office. ·Ensure that the RODC installation source files do not contain cached secrets. ·Minimize the bandwidth used during the initial synchronization of Active Directory Domain Services (AD?DS).

What should you include in your plan?

A. Use Windows Server Backup to perform a full backup of an existing domain controller.

Use the backup to build the new RODCs.

B. Use Windows Server Backup to perform a custom backup of the critical volumes of an

existing domain controller. Use the backup to build the new RODCs.

C. Create a DFS namespace that contains the Active Directory database from one of the

existing domain controllers. Build the RODCs by using an answer file.

D. Create an RODC installation media. Build the RODCs from the RODC installation media.

你的公司拥有250家分公司。您的网络包含一个Active Directory域。域控制器运行Windows Server 2008 R2中。您计划部署在分支机构的只读域控制器（RODC的）。

你需要计划的RODC的部署，以满足下列要求： ?建立每个RODC在指定的分支机构。

?确保RODC的安装源文件不包含缓存的秘密。

?最小化过程中的Active Directory域服务初始同步使用的带宽 （公元？局副局长）。 你应包括在你的计划？

答：使用Windows Server备份来执行现有的域控制器的完全备份。使用备份来建立新的RODC。

B.使用Windows Server备份来执行现有的域控制器的关键卷的自定义备份。使用备份来建立新的RODC。

C.创建一个DFS命名空间包含Active Directory从现有的域控制器一个数据库。 RODC的构建通过使用应答文件。

D.创建一个RODC安装媒体。建立从RODC安装媒体的RODC。

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 8

Your network consists of a single Active Directory domain. The network is located on the 172.16.0.0/23subnet（子网）.The company hires temporary（临时的） employees. You provide user accounts（用户账号） and computers to the temporaryemployees. The temporary employees

receive computers that are outside the Active Directory domain. Thetemporary employees use their computers to connect to the network by using wired connections andwireless connections. The company's security policy specifies（详细说明） that the computers connected to the network must have the latest updates（最近的更新）for the operating system.

You need to plan the network's security so that it complies with the company's security policy. What shouldyou include in your plan?

A. Implement a Network Access Protection (NAP) strategy for the 172.16.0.0/23 subnet. B. Create an extranet domain within the same forest. Migrate the temporary employees' user

accounts to the extranet domain. Install the necessary domain resources on the 172.16.0.0/23 subnet.

C. Move the temporary employees' user accounts to a new organizational unit (OU). Create

a new Group Policy object (GPO) that uses an intranet Microsoft Update server. Link the new GPO to the new OU.

D. Create a new subnet in a perimeter network. Relocate the wireless access point to the

perimeter network. Require authentication through a VPN server before allowing access to the internal resources.

您的网络由一个单一的活动目录域。该网络是位于172.16.0.0/23 subnet.The公司雇用临时雇员。您提供用户帐户和计算机的临时 员工。临时员工得到计算机以外的活动目录域中。该 临时员工利用自己的电脑，就可以通过有线网络连接和

无线连接。该公司的安全政策规定，连接到网络的计算机必须有操作系统的最新更新。

你需要来规划网络的安全，以便它与公司的安全政策的规定。应该怎样 你包括你的计划？

答：实施网络访问保护（NAP）为172.16.0.0/23子网策略。

B.创建在同一林中外部网域。迁移的临时雇员外联网的用户帐户添加到域。安装在172.16.0.0/23子网必要的域中的资源。

三移动的临时员工到一个新的用户帐户的组织单位（OU）。创建一个新的组策略对象（GPO），它使用的Intranet Microsoft更新服务器。新的GPO链接到新的OU。 D.创建一个新的外围网络中的子网。无线接入点迁移到外围网络。需要验证通过后才允许访问内部资源的VPN服务器。

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 9

Your company has a main office and two branch offices. The main office is located in London. The branch offices are located in New York and Paris. Your network consists of an Active Directory forest that contains three domains named contoso.com, paris.contoso.com, and

newyork.contoso.com. All domain controllers run Windows Server 2008 R2 and have the DNS

Server server role installed. The domain controllers for contoso.com are located in the London office. The domain controllers for paris.contoso.com are located in the Paris office. The domain controllers for newyork.contoso.com are located in the New York office. A domain controller in the contoso.com domain has a standard primary DNS zone for contoso.com. A

domain controller in the paris.contoso.com domain has a standard primary DNS zone for paris.contoso.com. A domain controller in the newyork.contoso.com domain has a standard primary DNS zone for newyork.contoso.com.

You need to plan a name resolution strategy for the Paris office that meets the following requirements: ·If a WAN link fails, clients must be able to resolve hostnames for contoso.com. ·If a WAN link fails, clients must be able to resolve hostnames for newyork.contoso.com. ·The DNS servers in Paris must be updated when new authoritative DNS servers are added to newyork.contoso.com.

贵公司的主要办事处和两个分公司。其主要办事处设在伦敦。分支办事处设在纽约和巴黎。网络包括一个Active Directory林包含三个域命名为contoso.com，

paris.contoso.com和newyork.contoso.com。所有域控制器都运行Windows Server 2008 R2和DNS服务器有服务器角色安装。 contoso.com的域控制器是位于伦敦的办公室。为paris.contoso.com域控制器位于巴黎的办公室。为newyork.contoso.com域控制器是位于纽约的办公室。一个在contoso.com域的域控制器有一个标准的主要contoso.com的DNS区域。一

域的域控制器有一个paris.contoso.com标准小学为paris.contoso.com DNS区域。在newyork.contoso.com一个域控制器有一个标准的主DNS区域的newyork.contoso.com。

你需要计划为巴黎办事处，以满足下列要求名称解析的策略：

?如果一个广域网链接失败，客户端必须能够解决contoso.com的主机名。

?如果一个广域网链接失败，客户端必须能够解析newyork.contoso.com主机名。 ?在巴黎的DNS服务器必须被更新时，新的权威DNS服务器添加到newyork.contoso.com。

What should you include in your plan?

A. Configure conditional forwarding for contoso.com. Configure conditional forwarding for

newyork.contoso.com.

B. Create a standard secondary zone for contoso.com. Create a standard secondary zone

for newyork.contoso.com.

C. Convert the standard zone into an Active Directoryintegrated zone. Add all DNS servers in

the forest to the root hints list.

D. Create an Active Directoryintegrated stub zone for contoso.com. Create an Active

Directoryintegrated stub zone for newyork.contoso.com.

你应包括在你的计划？

A.配置contoso.com的条件转发。条件转发配置为newyork.contoso.com。 B.创建一个contoso.com的标准辅助区域。创建一个newyork.contoso.com标准辅助区域。

三转换为主动Directoryintegrated区标准区域。添加在林中的所有DNS服务器的根

提示列表。

D.创建一个contoso.com的主动Directoryintegrated存根区域。创建一个newyork.contoso.com主动Directoryintegrated存根区域。

Answer: B QUESTION 10

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to implement a Certificate Services solution that meets the following requirements: ·Automates the distribution of certificates for internal users ·Ensures that the network's certificate infrastructure is as secure as possible ·Gives external users access to resources that use certificatebased authentication

您的网络由一个单一的活动目录域。所有域控制器都运行Windows Server 2008 R2的。

你需要实现一个证书服务解决方案，符合下列要求： ?自动化证书的内部用户分布

?确保网络的证书基础设施尽可能安全

?对外部资源的使用certificatebased验证用户访问

What should you do?

A. Deploy an online standalone root certification authority (CA). Deploy an offline standalone

root CA.

B. Deploy an offline enterprise root certification authority (CA). Deploy an offline enterprise

subordinate CA.

C. Deploy an offline standalone root certification authority (CA). Deploy an online enterprise

subordinate CA. Deploy an online standalone subordinate CA.

D. Deploy an online standalone root certification authority (CA). Deploy an online enterprise

subordinate CA. Deploy an online standalone subordinate CA.

答：网上部署独立根证书颁发机构（CA）颁发。部署脱机独立根CA。 二脱机部署企业根证书颁发机构（CA）颁发。部署企业从属CA脱机。

三部署脱机独立的根证书颁发机构（CA）。部署在线企业从属CA。部署一个在线独立从属CA。

四部署一个在线独立根证书颁发机构（CA）颁发。部署在线企业从属CA。部署一个在线独立从属CA。

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 11

Your network contains an Active Directory forest named contoso.com.

You plan to deploy a new child domain named branch.contoso.com. The child domain will contain two domain controllers. Both domain controllers will have the DNS Server server role installed. All users and computers in the branch office will be members of the branch.contoso.com domain. You need to plan the DNS infrastructure for the child domain to meet the following requirements:

·Ensure resources in the root domain are accessible by fully qualified domain names. ·Ensure resources in the child domain are accessible by fully qualified domain names. ·Provide name resolution services in the event that a single server fails for a prolonged period of time. ·Automatically recognize when new DNS servers are added to or removed from the contoso.com domain.

What should you include in your plan?

A. On both domain controllers, add a conditional forwarder for contoso.com and create a

standard primary zone for branch.contoso.com.

B. On both domain controllers, modify the root hints to include the domain controllers for

contoso.com. On one domain controller, create an Active Directoryintegrated zone for branch.contoso.com.

C. On one domain controller create an Active Directoryintegrated zone for

branch.contoso.com and create an Active Directoryintegrated stub zone for contoso.com. D. On one domain controller, create a standard primary zone for contoso.com. On the other

domain controller, create a standard secondary zone for contoso.com.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 12

Your network is configured as shown in the following diagram.

You deploy an enterprise certification authority (CA) on the internal network. You also deploy a Microsoft Online Responder on the internal network. You need to recommend a secure method for Internet users to verify the validity of individual certificates.

The solution must minimize network bandwidth. What should you recommend?

A. Deploy a subordinate CA on the perimeter network.

B. Install a standalone CA and the Network Device Enrollment Service (NDES) on a server

on the perimeter network.

C. Install a Network Policy Server (NPS) on a server on the perimeter network. Redirect

authentication requests to a server on the internal network.

D. Install Microsoft Internet Information Services (IIS) on a server on the perimeter network.

Configure IIS to redirect requests to the Online Responder on the internal network.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 13

Your network contains two DHCP servers. The DHCP servers are named DHCP1 and DHCP2. The internal network contains 1,000 DHCP client computers that are located on a single subnet. A router separates the internal network from the Internet. The router has a single IP address on the internal interface. DHCP1 has the following scope information. ·Starting IP address: 172.16.0.1 ·Ending IP address: 172.16.7.255 ·Subnet mask: 255.255.240.0

You need to provide a faulttolerant DHCP infrastructure that supports the client computers on the internal network. In the event that a DHCP server fails, all client computers must be able to obtain a valid IP address.

How should you configure DHCP2?

A. Create a scope for the subnet 172.16.0.0/20. Configure the scope to use a starting IP

address of 172.16.8.1 and an ending IP address of 172.16.15.254.

B. Create a scope for the subnet 172.16.0.0/21. Configure the scope to use a starting IP

address of 172.16.0.1 and an ending IP address of 172.16.15.254.

C. Create a scope for the subnet 172.16.8.0/21. Configure the scope to use a starting IP

address of 172.16.8.1 and an ending IP address of 172.16.10.254.

D. Create a scope for the subnet 172.17.0.0/16. Configure the scope to use a starting IP

address of 172.17.0.1 and an ending IP address of 172.17.255.254.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 14

Your company has a main office and three branch offices. The network consists of a single Active Directory domain. Each office contains an Active Directory domain controller. You need to create a DNS

infrastructure for the network that meets the following requirements: ·The DNS infrastructure must allow the client computers in each office to register DNS names within their respective offices. ·The client computers must be able to resolve names for hosts in all offices. What should you do?

A. Create an Active Directoryintegrated zone at the main office site.

B. Create a standard primary zone at the main office site and at each branch office site. C. Create a standard primary zone at the main office site. Create a secondary zone at each

branch office site.

D. Create a standard primary zone at the main office site. Create an Active

Directoryintegrated stub zone at each branch office site.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 15

Your network consists of a single Active Directory domain. The network contains two Windows Server 2008 R2 computers named Server1 and Server2. The company has two identical print devices. You plan to deploy print services. You need to plan a print services infrastructure to meet the following requirements: ·Manage the print queue from a central location. ·Make the print services available, even if one of the print devices fails. What should you include in your plan?

A. Install and share a printer on Server1. Enable printer pooling.

B. Install the Remote Desktop Services server role on both servers. Configure Remote

Desktop Connection Broker (RD Connection Broker).

C. Install and share a printer on Server1. Install and share a printer on Server2. Use Print

Management to install the printers on the client computers.

D. Add Server1 and Server2 to a Network Load Balancing cluster. Install a printer on each

node of the cluster.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 16

Your network contains two servers that run the Server Core installation of Windows Server 2008 R2. The two servers are part of a Network Load Balancing cluster.

The cluster hosts a Web site. Administrators use client computers that run Windows 7.

You need to recommend a strategy that allows the administrators to remotely manage the Network Load Balancing cluster. Your strategy must support automation. What should you recommend?

A. On the servers, enable Windows Remote Management (WinRM).

B. On the servers, add the administrators to the Remote Desktop Users group.

C. On the Windows 7 client computers, enable Windows Remote Management (WinRM). D. On the Windows 7 client computers, add the administrators to the Remote Desktop Users

group.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 17

Your company has a main office and a branch office. You plan to deploy a Readonly Domain Controller (RODC) in the branch office. You need to plan a strategy to manage the RODC. Your plan must meet the following requirements: ·Allow branch office support technicians to maintain drivers and disks on the RODC ·Prevent branch office support technicians from managing domain user accounts What should you include in your plan?

A. Configure the RODC for Administrator Role Separation.

B. Configure the RODC to replicate the password for the branch office support technicians.

C. Set NTFS permissions on the Active Directory database to Read & Execute for the branch

office support technicians.

D. Set NTFS permissions on the Active Directory database to Deny Full Control for the

branch office support technicians.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 18

Your network consists of a single Active Directory domain. The network contains five Windows Server

2008 R2 servers that host Web applications. You need to plan a remote management strategy to manage

the Web servers. Your plan must meet the following requirements: 稟llow Web developers to configure features on the Web sites

稰revent Web developers from having full administrative rights on the Web servers What should you include in your plan?

A. Configure request filtering on each Web server.

B. Configure authorization rules for Web developers on each Web server.

C. Configure the security settings in Internet Explorer for all Web developers by using a

Group Policy.

D. Add the Web developers to the Account Operators group in the domain.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 19

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. The domain contains 200 Windows Server 2008 R2 servers. You need to plan a monitoring solution that meets the following requirements. ·Sends a notification by email to the administrator if an application error occurs on any of the servers ·Uses the minimum amount of administrative effort What should you include in your plan?

A. On one server, create event subscriptions for each server. On the server, attach tasks to

the application error events.

B. On one server, create an Event Trace Sessions Data Collector Set. On all servers, create

a System Performance Data Collector Set.

C. On all servers, create event subscriptions for one server. On all servers, attach a task for

the application error events.

D. On all servers, create a System Performance Data Collector Set. On one server, configure

the report settings for the new Data Collector set.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 20

Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains 50 member servers that run Windows Server 2008 R2. An organizational unit (OU) named Branch1Servers contains the computer objects for the servers in Branch1. A global group named Branch1admins contains the user accounts for the administrators. Administrators maintain all member servers in Branch1. You need to recommend a solution that allows the members of Branch1admins group to perform the following tasks on the Branch1 member servers. ·Stop and start services ·Change registry settings

What should you recommend?

A. Add the Branch1admins group to the Power Users local group on each server in Branch1. B. Add the Branch1admins group to the Administrators local group on each server in

Branch1.

C. Assign the Branch1admins group change permissions to the Branch1Servers OU and to

all child objects.

D. Assign the Branch1admins group Full Control permissions on the Branch1Servers OU

and to all child objects.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 21

Your network consists of a single Active Directory domain. The network includes a branch office named Branch1. Branch1 contains a Readonly Domain Controller (RODC) named Server1. A global group named Branch1?admins contains the user accounts for administrators. Administrators manage the client computers and servers in Branch1.

You need to recommend a solution for delegating control of Server1. Your solution must meet the following requirements: ·Allow the members of the Branch1admins group to administer Server1 including, change device drivers and install operating system updates by using Windows Update. ·Provide the Branch1admins group rights on Server1 only. ·Prevent Branch1admins group from modifying Active Directory objects. What should you recommend?

A. Add the Branch1admins global group to the Server Operators builtin local group.

B. Add the members of the Branch1admins global group to the Administrators builtin local

group of Server1.

C. Grant Full Control permission on the Server1 computer object in the domain to the

Branch1admins group.

D. Move the Server1 computer object to a new organizational unit (OU) named

Branch1servers. Grant Full Control permission on the Branch1servers OU to the Branch1admins group.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 22

Your network consists of a single Active Directory forest. The forest functional level is Windows Server 2008 R2. The forest contains two domains named contoso.com and na.contoso.com.

Contoso.com contains a user named User1. Na.contoso.com contains an organizational unit (OU) named Security.

You need to give User1 administrative rights so that he can manage Group Policies for the Security OU.

You want to achieve this goal while meeting the following requirements: ·User1 must be able to create and configure Group Policies in na.contoso.com. ·User1 must be able to link Group Policies to the Security OU. ·User1 must be granted the least administrative rights necessary to achieve the goal. What should you do?

A. Add User1 to the Administrators group for na.contoso.com.

B. Add User1 to the Group Policy Creator Owners group in contoso.com. Modify the

permissions on the Security OU.

C. Run the Delegation of Control Wizard on the Security OU. In the Group Policy

Management Console, modify the permissions of the Group Policy Objects container in the na.contoso.com domain.

D. Run the Delegation of Control Wizard on na.contoso.com. In the Group Policy

Management Console, modify the permissions of the Group Policy Objects container in the contoso.com domain.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 23

Your network contains several branch offices. All servers run Windows Server 2008 R2. Each branch office contains a domain controller and a file server. The DHCP Server server role is installed on the branch office domain controllers. Each office has a branch office administrator. You need to delegate the administration of DHCP to meet the following requirements: ·Allow branch office administrators to manage DHCP scopes for their own office ·Prevent the branch office administrators from managing DHCP scopes in other offices ·Minimize administrative effort

What should you do?

A. In the Active Directory domain, add the branch office administrators to the Server

Operators builtin local group.

B. In the Active Directory domain, add the branch office administrators to the Network

Configuration Operators builtin local group.

C. In each branch office, migrate the DHCP Server server role to the file server. On each file

server, add the branch office administrator to the DHCP Administrators local group.

D. In each branch office, migrate the DHCP Server server role to the file server. In the Active

Directory domain, add the branch office administrators to the DHCP Administrators domain local group.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 24

Your company has a single Active Directory domain. You have 30 database servers that run Windows Server 2008 R2.

The computer accounts for the database servers are stored in an organizational unit (OU) named Data. The user accounts for the database administrators are stored in an OU named Admin. The database administrators are members of a global group named D_Admins. You must allow the database administrators to perform administrative tasks on the database servers. You must

prevent the database administrators from performing administrative tasks on other servers. What should you do?

A. Deploy a Group Policy to the Data OU. B. Deploy a Group Policy to the Admin OU.

C. Add D_Admins to the Domain Admins global group.

D. Add D_Admins to the Server Operators builtin local group.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 25

Your network consists of a single Active Directory forest that contains a root domain and two child domains. All servers run Windows Server 2008 R2. A corporate policy has the following requirements: ·All local guest accounts must be renamed and disabled. ·All local administrator accounts must be renamed.

You need to recommend a solution that meets the requirements of the corporate policy. What should you recommend?

A. Implement a Group Policy object (GPO) for each domain. B. Implement a Group Policy object (GPO) for the root domain.

C. Deploy Network Policy and Access Services (NPAS) on all domain controllers in each

domain.

D. Deploy Active Directory Rights Management Services (AD RMS) on the root domain

controllers.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 26

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All domain controllers run Windows Server 2008 R2.

A corporate policy requires that the users from the research department have higher levels of

account and password security than other users in the domain. You need to recommend a solution that meets the requirements of the corporate policy. Your solution must minimize hardware and software costs.

What should you recommend?

A. Create a new Active Directory site. Deploy a Group Policy object (GPO) to the site. B. Create a new Password Settings Object (PSO) for the research department's users.

C. Create a new organizational unit (OU) named Research in the existing domain. Deploy a

Group Policy object (GPO) to the Research OU.

D. Create a new domain in the forest. Add the research department's user accounts to the

new domain. Configure a new security policy in the new domain.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 27

Your network consists of a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. All servers run Windows Server 2008 R2. A corporate security policy requires complex passwords for user accounts that have administrator privileges. You need to design a strategy that meets the following requirements: ·Ensures that administrators use complex passwords ·Minimizes the number of servers required to support the solution What should you include in your design?

A. Implement Network Access Protection (NAP).

B. Implement Active Directory Rights Management Services (AD RMS).

C. Create a new Password Settings Object (PSO) for administrator accounts.

D. Create a new child domain in the forest. Move all nonadministrator accounts to the new

domain. Configure a complex password policy in the root domain.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 28

Your network consists of a single Active Directory domain. The domain contains three

organizational units (OUs) named Test, Application, and Database. You need to redesign the layout of the OUs to support the following requirements: ·Prevent Group Policy objects (GPOs) that are linked to the domain from applying to computers located in the Applications OU

·Minimize the number of GPOs ·Minimize the number of OUs

What should you include in your design?

A. Create a Starter GPO.

B. Create a Windows Management Instrumentation (WMI) filter. C. Delegate permissions on the Application OU.

D. Configure block inheritance on the Application OU.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 29

Your network consists of a single Active Directory domain. The relevant portion of the Active Directory domain is configured as shown in the following diagram.

The Staff organizational unit (OU) contains all user accounts except for the managers' user accounts. The Managers OU contains the managers' user accounts and the following global groups: ·Sales ·Finance ·Engineering

You create a new Group Policy object (GPO) named GPO1, and then link it to the Employees OU. Users from the Engineering global group report that they are unable to access the Run command on the Start menu. You discover that the GPO1 settings are causing the issue. You need to

ensure that the users from the Engineering global group are able to access the Run command on the Start menu. What should you do?

A. Configure GPO1 to use the Enforce Policy option. B. Configure Block Inheritance on the Managers OU.

C. Configure Group Policy filtering on GPO1 for the Engineering global group.

D. Create a new child OU named Engineering under the Employees OU. Move the

Engineering global

group to the new Engineering child OU.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 30

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.

You need to recommend a Group Policy deployment strategy. Your strategy must support the following requirements: ·Domainlevel Group Policy objects (GPOs) must not be overwritten by organizational unit (OU) level GPOs. ·OUlevel

GPOs must not apply to members of the Server Operators group. What should you recommend?

A. Enable Block Inheritance for the domain, and then modify the permissions of all GPOs

linked to OUs.

B. Enable Block Inheritance for the domain, and then enable Loopback Processing policy

mode. Add the Server Operators group to the Restricted Groups list.

C. Set all domain level GPOs to Enforced, and then modify the permissions of the GPOs that

are linked to OUs.

D. Set all domain level GPOs to Enforced, and then enable Loopback Processing policy

mode. Add the Server Operators group to the Restricted Groups list.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 31

Your network consists of three Active Directory forests. Forest trust relationships exist between all forests. Each forest contains one domain. All domain controllers run Windows Server 2008 R2. Your company has three network administrators. Each network administrator manages a forest and the Group Policy objects (GPOs) within that forest.

You need to create standard GPOs that the network administrators in each forest will use. The GPOs must meet the following requirements: ·The GPOs must only contain settings for either user configurations or computer configurations. ·The number of GPOs must be minimized.

Which two actions should you perform? (Each correct answer presents part of the solution. Choose two.)

A. Export the new GPOs to .cab files. Ensure that the .cab files are available to the network

administrator in each forest.

B. Create two new GPOs. Configure both GPOs to use the required user configurations and

the required computer configurations.

C. Create two new GPOs. Configure one GPO to use the required user configuration.

Configure the other GPO to use the required computer configuration.

D. Back up the Sysvol folder that is located on the domain controller where the new GPOs

were created. Provide the backup to the network administrator in each forest.

Answer: AC Section: (none)

Explanation/Reference:

QUESTION 32

Your company has a branch office that contains a Windows Server 2008 R2 computer. The

Windows Server 2008 R2 computer runs Windows Server Update Services (WSUS). The WSUS server is configured to store updates locally.

The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link. Internet access is provided through the branch office.

You need to design a strategy for patch management that meets the following requirements: ·WSUS updates are approved independently for each satellite office. ·Internet traffic is minimized.

What should you include in your design?

A. In each satellite office, install a WSUS server. Configure each satellite office WSUS server

as an autonomous server.

B. In each satellite office, install a WSUS server. Configure each satellite office WSUS server

as a replica of the branch office WSUS server.

C. In each satellite office, install a WSUS server. Configure each satellite office WSUS server

to use the branch office WSUS server as an upstream server.

D. For each satellite office, create organizational units (OUs). Create and link the Group

Policy objects (GPOs) to the OUs. Configure different schedules to download updates from the branch office WSUS server to the client computers in each satellite office.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 33

Your network contains several Windows Server 2008 R2 servers that run Windows Server Update Services (WSUS). The WSUS servers distribute updates to all computers on the internal network. Remote users connect from their personal computers to the internal network by using a splittunnel VPN connection.

You need to plan a strategy for patch management that deploys updates on the remote users' computers.

Your strategy must meet the following requirements: ·Minimize bandwidth use over the VPN connections ·Require updates to be approved on the WSUS servers before they are installed on the client computers

What should you include in your plan?

A. Create a Group Policy object (GPO) to perform clientside targeting.

B. Create a computer group for the remote users' computers. Configure the remote users'

computers to use the internal WSUS server.

C. Create a custom connection by using the Connection Manager Administration Kit (CMAK).

Deploy the custom connection to all of the remote users' computers.

D. Deploy an additional WSUS server. Configure the remote users' computers to use the

additional WSUS server. Configure the additional WSUS server to leave the updates on the Microsoft Update Web site.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 34

Your company has a branch office that contains a Windows Server 2008 R2 server. The server runs Windows Server Update Services (WSUS). The company opens four new satellite offices. Each satellite office connects to the branch office by using a dedicated WAN link. You need to design a strategy for patch management that meets the following requirements: ·WSUS updates are approved from a central location. ·WAN traffic is minimized between the branch office and the satellite offices. What should you include in your design?

A. In each satellite office, install a WSUS server. Configure each satellite office WSUS server

as a replica of the branch office WSUS server.

B. In each satellite office, install a WSUS server. Configure each satellite office WSUS server

as an autonomous server that synchronizes to the branch office WSUS server.

C. On the branch office WSUS server, create a computer group for each satellite office. Add

the client computers in each satellite office to their respective computer groups.

D. For each satellite office, create an organizational unit (OU). Create and link a Group Policy

object (GPO) to each OU. Configure different schedules to download updates from the branch office WSUS server to the client computers in each satellite office.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 35

You need to design a Windows Server Update Services (WSUS) infrastructure that meets the following requirements: ·The updates must be distributed from a central location. ·All computers must continue to receive updates in the event that a server fails. What should you include in your design?

A. Configure two WSUS servers in a Microsoft SQL Server 2008 failover cluster. Configure

each WSUS server to use a local database.

B. Configure a single WSUS server to use multiple downstream servers. Configure each

WSUS server to use a RAID 1 mirror and a local database.

C. Configure a single WSUS server to use multiple downstream servers. Configure each

WSUS server to use a RAID 5 array and a local database.

D. Configure a Microsoft SQL Server 2008 failover cluster. Configure two WSUS servers in a

Network Load Balancing cluster. Configure WSUS to use the remote SQL Server 2008 database instance.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 36

Your network consists of a single Active Directory forest. The sales department in your company has 600 Windows Server 2008 R2 servers. You need to recommend a solution to monitor the performance of the 600 servers. Your solution must meet the following requirements: ·Generate alerts when the average processor usage is higher than 90 percent for 20 minutes. ·Automatically adjust the processor monitoring threshold to allow for temporary changes in the workload.

What should you recommend?

A. Install Windows System Resource Manager (WSRM) on each server. B. Deploy Microsoft System Center Operations Manager (OpsMgr). C. Deploy Microsoft System Center Configuration Manager (SysMgr). D. Configure Reliability and Performance Monitor on each server.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 37

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. A server named Server1 has the Remote Desktop Services server role installed. You notice that several users consume more than 30 percent of the CPU resources throughout the day. You need to prevent users from consuming more than 15 percent of the CPU resources.

Administrators must not be limited by the amount of CPU resources that they can consume. What should you do?

A. Implement Windows System Resource Manager (WSRM), and configure user policies. B. Implement Windows System Resource Manager (WSRM), and configure session policies. C. Configure Performance Monitor, and create a userdefined Data Collector Set.

D. Configure Performance Monitor, and create an Event Trace Session Data Collector Set.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 38

Your network contains a standalone root certification authority (CA). You have a server named Server1 that runs Windows Server 2008 R2. You issue a server certificate to Server1. You deploy Secure Socket Tunneling Protocol (SSTP) on Server1.

You need to recommend a solution that allows external partner computers to access internal network resources by using SSTP. What should you recommend?

A. Enable Network Access Protection (NAP) on the network. B. Deploy the Root CA certificate to the external computers.

C. Implement the Remote Desktop Connection Broker role service. D. Configure the firewall to allow inbound traffic on TCP Port 1723.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 39

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2.

You need to plan an auditing strategy that meets the following requirements: ·Audits all changes to Active Directory Domain Services (AD?DS) ·Stores all auditing data in a central location What should you include in your plan?

A. Configure an audit policy for the domain. Configure Event Forwarding.

B. Configure an audit policy for the domain controllers. Configure Data Collector Sets. C. Implement Windows Server Resource Manager (WSRM) in managing mode. D. Implement Windows Server Resource Manager (WSRM) in accounting mode.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 40

Your network contains a single Active Directory domain. All domain controllers run Windows

Server 2008 R2. There are 1,000 client computers that run Windows 7 and that are connected to managed switches.

You need to recommend a strategy for network access that meets the following requirements: ·Users are unable to bypass network access restrictions. ·Only client computers that have uptodate service packs installed can access the network. ·Only client computers that have uptodate antimalware software installed can access the network. What should you recommend?

A. Implement Network Access Protection (NAP) that uses DHCP enforcement. B. Implement Network Access Protection (NAP) that uses 802.1x enforcement.

C. Implement a Network Policy Server (NPS), and enable IPsec on the domain controllers. D. Implement a Network Policy Server (NPS), and enable Remote Authentication DialIn User

Service (RADIUS) authentication on the managed switches.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 41

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. The network contains 100 servers and 5,000 client computers. The client computers run either Windows XP Service Pack 1 or Windows 7.

You need to plan a VPN solution that meets the following requirements: ·Stores VPN passwords as encrypted text ·Supports Suite B cryptographic algorithms ·Supports automatic enrollment of certificates ·Supports client computers that are configured as members of a workgroup What should you include in your plan?

A. Upgrade the client computers to Windows XP Service Pack 3. Implement a standalone

certification authority (CA). Implement an IPsec VPN that uses certificatebased authentication.

B. Upgrade the client computers to Windows XP Service Pack 3. Implement an enterprise

certification authority (CA) that is based on Windows Server?2008 R2. Implement an IPsec VPN that uses Kerberos authentication.

C. Upgrade the client computers to Windows 7. Implement an enterprise certification

authority (CA) that is based on Windows Server 2008 R2. Implement an IPsec VPN that uses preshared keys.

D. Upgrade the client computers to Windows 7. Implement an enterprise certification

authority (CA) that is based on Windows Server 2008 R2. Implement an IPsec VPN that uses certificatebased authentication.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 42

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. All servers run Windows Server 2008 R2. All client computers run Windows 7. You need to generate a monthly report on the status of software updates for the client computers. Your solution must meet the following requirements: ·Display all of the operating system updates that installed successfully ·Display all of the Microsoft application updates that installed successfully ·Display all of the operating system updates that failed to install ·Display all of the Microsoft application updates that failed to install ·Minimize administrative effort ·Minimize costs

What should you do?

A. Install Microsoft System Center Essentials (Essentials) 2007. Deploy management agents

on all client computers.

B. Install Microsoft System Center Configuration Manager (SysMgr) 2007. Deploy

management agents on all client computers.

C. Install Windows Server Update Services (WSUS) 3.0 SP2. Configure Windows Update by

using a Group Policy object (GPO).

D. Deploy Microsoft Baseline Security Analyzer (MBSA) 2.1 on the client computers. Run

MBSA on each client computer, and save the report to a shared folder on the network.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 43

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. Your company and an external partner plan to collaborate on a project. The external partner has an Active Directory domain that contains Windows Server 2008 R2 domain controllers. You need to design a collaboration solution that meets the following requirements: ·Allows users to prevent sensitive documents from being forwarded to untrusted recipients or from being printed. ·Allows users in the external partner organization to access the protected content to which they have been granted rights. ·Sends all interorganizational traffic over port 443. ·Minimizes the administrative effort required to manage the external users. What should you include in your design?

A. Establish a federated trust between your company and the external partner. Deploy a

Windows Server 2008 R2 server that has Microsoft SharePoint Foundation 2010 installed. B. Establish a federated trust between your company and the external partner. Deploy a

Windows Server 2008 R2 server that runs Microsoft SharePoint 2010 and that has the Active Directory Rights Management Services (AD RMS) role installed.

C. Establish an external forest trust between your company and the external partner. Deploy

a Windows Server 2008 R2 server that has the Active Directory Certificate Services server role installed. Implement Encrypting File System (EFS).

D. Establish an external forest trust between your company and the external partner. Deploy

a Windows Server 2008 R2 server that has the Active Directory Rights Management Service (AD RMS) role installed and Microsoft SharePoint Foundation 2010 installed.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 44

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are five Windows Server 2003 SP2 servers that have the Terminal Server component installed. A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006. You need to create a remote access strategy for the Remote Desktop Services servers that meets the following requirements: ·Restricts access to specific users ·Minimizes the number of open ports on the firewall ·Encrypts all remote connections to the Remote Desktop Services servers What should you do?

A. Implement SSL bridging on the ISA Server. Require authentication on all inbound

connections to the ISA Server.

B. Implement port forwarding on the ISA Server. Require authentication on all inbound

connections to the ISA Server.

C. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop resource authorization policy (RD RAP). D. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop connection authorization policy (RD CAP).

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 45

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are five Windows Server 2003 SP2 servers that have the Terminal Server component installed. A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006.

You plan to give remote users access to the Remote Desktop Services servers.

You need to create a remote access strategy for the Remote Desktop Services servers that meets the following requirements: ·Restricts access to specific Remote Desktop Services servers ·Encrypts all connections to the Remote Desktop Services servers ·Minimizes the number of open ports on the firewall server What should you do?

A. Implement SSL bridging on the ISA Server. Require authentication on all inbound

connections to the ISA Server.

B. Implement port forwarding on the ISA Server. Require authentication on all inbound

connections to the ISA Server.

C. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop resource authorization policy (RD RAP). D. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop connection authorization policy (RD CAP).

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 46

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. There are five servers that run Windows Server 2003 SP2. The Windows Server 2003 SP2 servers have the Terminal Server component installed. A firewall server runs Microsoft Internet Security and Acceleration (ISA) Server 2006. All client computers run Windows 7. You plan to give remote users access to the Remote Desktop Services servers. You need to

create a remote access strategy for the Remote Desktop Services servers that meets the following requirements: ·Minimizes the number of open ports on the firewall server ·Encrypts all remote connections to the Remote Desktop Services servers ·Prevents network access to client computers that have Windows Firewall disabled

What should you do?

A. Implement port forwarding on the ISA Server. Implement Network Access Quarantine

Control on the ISA Server.

B. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and implement Network Access Protection (NAP).

C. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop connection authorization policy (RD?CAP). D. Upgrade a Windows Server 2003 SP2 server to Windows Server 2008 R2. On the

Windows Server 2008 R2 server, implement the Remote Desktop Gateway (RD Gateway) role service, and configure a Remote Desktop resource authorization policy (RD RAP).

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 47

Your network consists of a single Active Directory domain. Your network contains 10 servers and 500 client computers. All domain controllers run Windows Server 2008 R2. A Windows Server 2008 R2 server has Remote Desktop Services installed. All client computers run Windows XP Service Pack 3. You plan to deploy a new lineofbusiness application. The application requires desktop themes to be enabled.

You need to recommend a deployment strategy that meets the following requirements: ·Only authorized users must be allowed to access the application. ·Authorized users must be able to access the application from any client computer. ·Your strategy must minimize changes to the client computers. ·Your strategy must minimize software costs. What should you recommend?

A. Migrate all client computers to Windows 7. Deploy the application to all client computers

by using a Group Policy object (GPO).

B. Migrate all client computers to Windows 7. Deploy the application to the authorized users

by using a Group Policy object (GPO).

C. Deploy the Remote Desktop Connection (RDC) 7.0 software to the client computers.

Install the application on the Remote Desktop Services server. Implement Remote Desktop Connection Broker (RD Connection Broker).

D. Deploy the Remote Desktop Connection (RDC) 7.0 software to the client computers.

Enable the Desktop Experience feature on the Remote Desktop Services server. Install the application on the Remote Desktop Services server.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 48

Your network consists of a single Active Directory domain. All domain controllers run Windows Server 2008 R2. All client computers run Windows 7. All user accounts are stored in an

organizational unit (OU) named Staff. All client computer accounts are stored in an OU named Clients. You plan to deploy a new application.

You need to ensure that the application deployment meets the following requirements: ·Users must access the application from an icon on the Start menu. ·The application must be available to remote users when they are offline. What should you do?

A. Publish the application to users in the Staff OU. B. Publish the application to users in the Clients OU. C. Assign the application to computers in the Staff OU. D. Assign the application to computers in the Clients OU.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 49

Your network contains an Active Directory domain. The domain contains a Remote Desktop Services server that runs Windows Server 2008 R2. All client computers run Windows 7. You need to deploy a new lineofbusiness application. The deployment must meet the following requirements: ·Users must have access to the application from the company portal. ·Users must always have access to the latest version of the application. ·You must minimize the number of applications installed on the client computers. What should you do?

A. Publish the application to the users by using a Group Policy object (GPO).

B. Publish the application as a RemoteApp. Enable Remote Desktop Web Access (RD Web

Access).

C. Assign the application to the client computers by using a Group Policy object (GPO).

D. Deploy the application by using Microsoft System Center Configuration Manager (SCCM)

2007 R2.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 50

Your network consists of a single Active Directory domain. The domain contains a server that runs Windows Server 2008 R2 and that has the Remote Desktop Services server role installed. The server has six custom applications installed. The custom applications are configured as

RemoteApps. You notice that when a user runs one of the applications, other users report that the server seems slow and that some applications become unresponsive. You need to ensure that active user sessions receive equal access to system resources. What should you do?

A. Implement Remote Desktop Web Access.

B. Implement Remote Desktop Connection Broker.

C. Configure Performance Monitor.

D. Implement Windows System Resource Manager.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 51

Your network contains an Active Directory domain. You have a server that runs Windows Server 2008 R2 and has the Remote Desktop Services server role enabled. All client computers run Windows 7. You need to plan the deployment of a new lineofbusiness application to all client computers. The deployment must meet the following requirements: ·Users must access the application from an icon on their desktops. ·Users must have access to the application when they are not connected to the network. What should you do?

A. Publish the application as a RemoteApp.

B. Publish the application by using Remote Desktop Web Access (RD Web Access).

C. Assign the application to the Remote Desktop Services server by using a Group Policy

object (GPO).

D. Assign the application to all client computers by using a Group Policy object (GPO).

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 52

Your network contains a single Active Directory domain. You have 100 servers that run Windows Server 2008 R2 and 5,000 client computers that run Windows 7. You plan to deploy applications to the client computers. You need to recommend an application deployment strategy that meets the following requirements: ·Applications must be deployed only to client computers that meet the minimum hardware requirements. ·Deployments must be scheduled to occur outside business hours. ·Detailed reports on the success or failure of the application deployments must be provided. What should you recommend?

A. Deploy applications by using Group Policy.

B. Implement Windows Server Update Services (WSUS).

C. Implement Microsoft System Center Operations Manager (SCOM) 2007 R2. D. Implement Microsoft System Center Configuration Manager (SCCM) 2007 R2.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 53

Your company has a main office and two branch offices. Each office has a domain controller and file servers. Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. You need to plan the deployment of Distributed File System (DFS) to meet the following requirements: ·Ensure that users see only the folders to which they have access ·Ensure that users can access the data locally ·Minimize the bandwidth required to replicate data What should you include in your plan?

A. Deploy a standalone DFS namespace. Enable accessbased enumeration and use DFS

Replication.

B. Deploy a standalone DFS namespace. Enable accessbased enumeration and use File

Replication Service (FRS).

C. Deploy a domainbased DFS namespace and use DFS Replication. Modify each share to

be a hidden share.

D. Deploy a domainbased DFS namespace and use File Replication Service (FRS). Modify

each share to be a hidden share.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 54

Your network consists of a single Active Directory domain. Users access and share documents by using a DFS namespace. You need to recommend a solution to manage user access to documents. The solution must meet the following requirements: ·Allow for document versioning ·Allow for online collaboration What should you recommend?

A. File Server Resource Manager (FSRM) B. Volume Shadow Copy Service (VSS) C. Microsoft SharePoint Foundation 2010

D. Windows System Resource Manager (WSRM)

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 55

Your network is configured as shown in the following diagram.

Each office contains a server that has the File Services server role installed. The servers have a shared folder named Resources. You need to plan the data availability of the Resources folder. Your plan must meet the following requirements: ·If a WAN link fails, the files in the Resources folder must be available in all of the offices. ·If a single server fails, the files in the Resources folder must be available in each of the branch offices, and the users must be able to use existing drive mappings. ·Your plan must minimize network traffic over the WAN links. What should you include in your plan?

A. a standalone DFS namespace that uses DFS Replication in a full mesh topology B. a domainbased DFS namespace that uses DFS Replication in a full mesh topology C. a standalone DFS namespace that uses DFS Replication in a hub and spoke topology D. a domainbased DFS namespace that uses DFS Replication in a hub and spoke topology

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 56

Your network consists of a single Active Directory domain. The domain contains a file server named Server1 that runs Windows Server 2008 R2. The file server contains a shared folder named UserDocs. Each user has a subfolder in UserDocs that they use to store personal data. You need to design a data management solution that meets the following requirements: ·Limits the storage space that is available to each user in UserDocs ·Sends a notification to the administrator if a users attempts to save multimedia files in UserDocs ·Minimizes administrative effort

What should you include in your design?

A. Configure NTFS quotas on UserDocs. Configure a task in Event Viewer to send an email

notification.

B. Configure NTFS quotas on UserDocs. Schedule a script to monitor the contents of

UserDocs and send an email

notification if a multimedia file is found.

C. Install the File Server Resource Manager (FSRM) role service on Server1. Configure

event subscriptions.

D. Install the File Server Resource Manager (FSRM) role service on Server1. Configure hard

quotas and file screening.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 57

Your company has two branch offices that connect by using a WAN link. Each office contains a server that runs Windows Server 2008 R2 and that functions as a file server. Users in each office store data on the local file server. Users have access to data from the other office. You need to plan a data access solution that meets the following requirements: ·Folders that are stored on the file servers must be available to users in both offices. ·Network bandwidth usage between offices must be minimized. ·Users must be able to access all files in the event that a WAN link fails. What should you include in your plan?

A. On both servers, implement DFS Replication.

B. On both servers, install and configure File Server Resource Manager (FSRM) and File

Replication Service (FRS).

C. On one server, install and configure File Server Resource Manager (FSRM). On the other

server, install and configure File Replication Service (FRS).

D. On one server, install and configure Distributed File System (DFS). On the other server,

install and configure the Background Intelligent Transfer Service (BITS).

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 58

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. Users store all of their files in their Documents folder. Many users store large files. You plan to implement roaming user profiles for all users by using Group Policy. You need to recommend a solution that minimizes the amount of time it takes users to log on and log off of the computers that use the roaming user profiles. What should you recommend?

A. Modify the Group Policy object (GPO) to include folder redirection.

B. Modify the Group Policy object (GPO) to include Background Intelligent Transfer Service

(BITS) settings.

C. On the server that hosts the roaming user profiles, enable caching on the profiles share. D. On any server, install and configure the Background Intelligent Transfer Service (BITS)

server extensions.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 59

Your network contains a Windows Server 2008 R2 server that functions as a file server. All users have laptop computers that run Windows 7. The network is not connected to the Internet. Users save files to a shared folder on the server. You need to design a data provisioning solution that meets the following requirements: ·Users who are not connected to the corporate network must be able to access the files and the folders in the corporate network. ·Unauthorized users must not have access to the cached files and folders. What should you do?

A. Implement a certification authority (CA). Configure IPsec domain isolation.

B. Implement a certification authority (CA). Configure Encrypting File System (EFS) for the

drive that hosts the files.

C. Implement Microsoft SharePoint Foundation 2010. Enable Secure Socket Layer (SSL)

encryption.

D. Configure caching on the shared folder. Configure offline files to use encryption.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 60

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2. All client computers run Windows 7. Some users have laptop computers and work remotely from home. You need to plan a data provisioning infrastructure to secure sensitive files. Your plan must meet the following requirements: ·Files must be stored in an encrypted format. ·Files must be accessible by remote users over the Internet. ·Files must be encrypted while they are transmitted over the Internet. What should you include in your plan?

A. Deploy one Microsoft SharePoint Foundation 2010 site. Require users to access the

SharePoint site by using a Secure Socket Transmission Protocol (SSTP) connection. B. Deploy two Microsoft SharePoint Foundation 2010 sites. Configure one site for internal

users. Configure the other site for remote users. Publish the SharePoint sites by using HTTPS.

C. Configure a Network Policy and Access Services (NPAS) server to act as a VPN server.

Require remote users to access the files by using an IPsec connection to the VPN server. D. Store all sensitive files in folders that are encrypted by using Encrypting File System

(EFS). Require remote users to access the files by using Secure Socket Transmission Protocol (SSTP).

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 61

Your company has a main office and a branch office. Your network contains a single Active

Directory domain. You install 25 Windows Server 2008 R2 member servers in the branch office. You need to recommend a storage solution that meets the following requirements: ·Encrypts all data on the hard disks ·Allows the operating system to start only when the authorized user is present What should you recommend?

A. Encrypting File System (EFS)

B. File Server Resource Manager (FSRM)

C. Windows BitLocker Drive Encryption (BitLocker) D. Windows System Resource Manager (WSRM)

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 62

Your company plans to deploy eight file servers that run Windows Server 2008 R2. All file servers will connect to Ethernet switches. You need to plan a data storage solution that meets the following requirements: ·Allocates storage to the servers as needed ·Utilizes the existing network infrastructure ·Maximizes performance ·Maximizes fault tolerance

Which actions should you include in your plan?

A. Install Windows Server 2008 R2 Datacenter on each server. Deploy the servers in a

failover cluster. Deploy an iSCSI storage area network (SAN).

B. Install Windows Server 2008 R2 Standard on each server. Deploy the servers in a

Network Load Balancing (NLB) cluster. Implement RAID?5 on each server.

C. Install Windows Server 2008 R2 Enterprise on each server. Deploy the servers in a

failover cluster. Deploy a Fibre Channel (FC) storage area network (SAN).

D. Install Windows Server 2008 R2 Enterprise on each server. Deploy the servers in a

Network Load Balancing (NLB) cluster. Map a network drive on each server to an external storage array.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 63

You plan to deploy a distributed database application that runs on multiple Windows Server 2008 R2 servers.

You need to design a storage strategy that meets the following requirements: ·Allocates storage to servers as required ·Uses the existing network infrastructure ·Uses standard Windows management tools

·Ensures that data is available if a single disk fails What should you include in your design?

A. An iSCSI disk storage subsystem that supports Microsoft Multipath I/O. Configure the

storage subsystem as a RAID?0 array.

B. An iSCSI disk storage subsystem that supports Virtual Disk Service (VDS). Configure the

storage subsystem as a RAID?5 array.

C. A Fibre Channel (FC) disk storage subsystem that supports Microsoft Multipath I/O.

Configure the storage subsystem as a RAID?0 array.

D. A Fibre Channel (FC) disk storage subsystem that supports the Virtual Disk Service

(VDS). Configure the storage subsystem as a RAID?5 array.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 64

You plan to deploy a distributed database application that runs on Windows Server 2008 R2. You need to design a storage strategy that meets the following requirements: ·Allocates storage to servers as required ·Isolates storage traffic from the existing network ·Ensures that data is available if a single disk fails ·Ensures that data is available if a single storage controller fails What should you include in your design?

A. An iSCSI disk storage subsystem that uses Microsoft Multipath I/O. Configure a RAID 0

array.

B. An iSCSI disk storage subsystem that uses Virtual Disk Service (VDS). Configure a RAID

5 array.

C. A Fibre Channel (FC) disk storage subsystem that uses Microsoft Multipath I/O. Configure

a RAID 5

D. A Fibre Channel (FC) disk storage subsystem that uses Virtual Disk Service (VDS).

Configure a RAID 0 array.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 65

Your company has a main office and a branch office. Your network contains a single Active Directory domain. The functional level of the domain is Windows Server 2008 R2. An Active

Directory site exists for each office. All servers run Windows Server 2008 R2. You plan to deploy file servers in each office.

You need to design a file sharing strategy to meet the following requirements: ·Users in both offices must be able to access the same files. ·Users in both offices must use the same Universal Naming Convention (UNC) path to access files. ·The design must reduce the amount of bandwidth used to access files. ·Users must be able to access files even if a server fails.

What should you include in your design?

A. A standalone DFS namespace that uses replication. B. A domainbased DFS namespace that uses replication.

C. A multisite failover cluster that contains a server located in the main office and another

server located in the branch office.

D. A Network Load Balancing cluster that contains a server located in the main office and

another server located in the branch office.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 66

Your network consists of a single Active Directory domain. The network contains a file server that runs Windows Server 2008 R2. All servers use internal storage only. You plan to deploy a

client/server application. You need to deploy the application so that it is available if a single server fails. You must achieve this goal while minimizing costs. What should you do?

A. Deploy RemoteApp.

B. Deploy a failover cluster that uses No Majority: Disk Only.

C. Deploy a failover cluster that uses Node and File Share Disk Majority. D. Deploy Distributed File System (DFS) and configure replication.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 67

Your company has a main office and a branch office. The offices connect by using WAN links. The network consists of a single Active Directory domain. An Active Directory site exists for each office. Servers in both offices run Windows Server 2008 R2 Enterprise. You plan to deploy a failover cluster solution to service users in both offices.

You need to plan a failover cluster to meet the following requirements: ·Maintain the availability of services if a single server fails ·Minimize the number of servers required What should you include in your plan?

A. Deploy a failover cluster that contains one node in each office. B. Deploy a failover cluster that contains two nodes in each office.

C. In the main office, deploy a failover cluster that contains one node. In the branch office,

deploy a failover cluster that contains one node.

D. In the main office, deploy a failover cluster that contains two nodes. In the branch office,

deploy a failover cluster that contains two nodes.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 68

Your company has a main office and a branch office. Your network contains a single Active Directory domain. An Active Directory site exists for each office. All domain controllers run

Windows Server 2008 R2. You plan to modify the DNS infrastructure. You need to plan the new DNS infrastructure to meet the following requirements: ·Ensure that the DNS service is available even if a single server fails ·Encrypt the synchronization data that is sent between DNS servers ·Support dynamic updates to all DNS servers What should you include in your plan?

A. Install the DNS Server server role on two servers. Create a primary zone on the DNS

server in the main office. Create a secondary zone on the DNS server in the branch office. B. Install the DNS Server server role on a domain controller in the main office and on a

domain controller in the branch office. Configure DNS to use Active Directoryintegrated zones.

C. Install the DNS Server server role on a domain controller in the main office and on a

Readonly Domain Controller (RODC) in the branch office. Configure DNS to use Active Directoryintegrated zones.

D. Install the DNS Server server role on two servers. Create a primary zone and a

GlobalNames zone on the DNS server in the main office. Create a GlobalNames zone on the DNS server in the branch office.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 69

Your network consists of a single Active Directory domain. All servers run Windows Server 2008 R2.

You plan to publish a Web site on two Web servers.

You need to deploy an availability solution for your Web servers that meets the following requirements: ·Supports the addition of more Web servers without interrupting client connections ·Ensures that the Web site is accessible even if a single server fails What should you do?

A. Configure a failover cluster.

B. Configure a Web garden on each Web server. C. Create a Network Load Balancing cluster.

D. Create two application pools on each Web server.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 70

Your network consists of a single Active Directory domain. The network contains 20 file servers that run Windows Server 2008 R2. Each file server contains two volumes. One volume contains the operating system. The other volume contains all data files.

You need to plan a recovery strategy that meets the following requirements: ·Allows the operating system to be restored ·Allows the data files to be restored ·Ensures business continuity ·Minimizes the amount of time to restore the server What should you include in your plan?

A. Windows Deployment Services (WDS)

B. Windows Automated Installation Kit (Windows AIK) and folder redirection C. the Multipath I/O feature and Volume Shadow Copies

D. the Windows Server Backup feature and System Image Recovery

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 71

Your network consists of a single Active Directory forest. The forest contains one Active Directory domain. The domain contains eight domain controllers. The domain controllers run Windows Server 2003 Service Pack 2.

You upgrade one of the domain controllers to Windows Server 2008 R2.

You need to recommend an Active Directory recovery strategy that supports the recovery of deleted objects.

The solution must allow deleted objects to be recovered for up to one year after the date of deletion. What should you recommend?

A. Increase the tombstone lifetime for the forest.

B. Increase the interval of the garbage collection process for the forest.

C. Configure daily backups of the Windows Server 2008 R2 domain controller.

D. Enable shadow copies of the drive that contains the Ntds.dit file on the Windows Server

2008 R2 domain controller.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 72

Your company has several branch offices. Your network consists of a single Active Directory domain.

Each branch office contains domain controllers and member servers. The domain controllers run Windows

Server 2003 SP2. The member servers run Windows Server 2008 R2. Physical security of the servers at the branch offices is a concern.

You plan to implement Windows BitLocker Drive Encryption (BitLocker) on the member servers.

You need to ensure that you can access the BitLocker volume if the BitLocker keys are corrupted on the

member servers. The recovery information must be stored in a central location. What should you do?

A. Upgrade all domain controllers to Windows Server 2008 R2. Use Group Policy to

configure Public Key Policies.

B. Upgrade all domain controllers to Windows Server 2008 R2. Use Group Policy to enable

Trusted Platform Module (TPM) backups to Active Directory.

C. Upgrade the domain controller that has the schema master role to Windows Server 2008

R2. Use Group Policy to enable a Data Recovery Agent (DRA).

D. Upgrade the domain controller that has the primary domain controller (PDC) emulator role

to Windows Server 2008 R2. Use Group Policy to enable a Data Recovery Agent (DRA).

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 73

Your network consists of a single Active Directory domain. The domain controllers run Windows Server

2008 R2. Your company's enterprise security policy states that the domain controllers cannot contain

optical drives. You need to recommend a backup and recovery plan that restores the domain controllers in the event of a catastrophic server failure. What should you recommend?

A. Use Windows Server Backup to back up each domain controller to a local disk. Create a

Windows Recovery Environment (Windows RE) partition on each domain controller. B. Use Windows Server Backup to back up each domain controller to a local disk. Use

Windows Deployment Services (WDS) to deploy the Windows Recovery Environment (Windows RE).

C. Use Windows Server Backup to back up each domain controller to a remote network

share. Create a Windows Recovery Environment (Windows RE) partition on each domain controller.

D. Use Windows Server Backup to back up each domain controller to a remote network

share. Use Windows Deployment Services (WDS) to deploy the Windows Recovery Environment (Windows RE).

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 74

Your company has Windows Server 2008 R2 file servers.

You need to recommend a data recovery strategy that meets the following requirements: ·Backups must have a minimal impact on performance. ·All data volumes on the file server must be backed up daily.

·If a disk fails, the recovery strategy must allow individual files to be restored. ·Users must be able to retrieve previous versions of files without the intervention of an administrator.

What should you recommend?

A. Deploy File Server Resource Manger (FSRM). Use Windows Server Backup to perform a

daily backup to an external disk.

B. Deploy Windows Automated Installation Kit (Windows AIK). Enable shadow copies for the

volumes that contain shared user data. Store the shadow copies on a separate physical disk.

C. Use Windows Server Backup to perform a daily backup to an external disk. Enable

shadow copies for the volumes that contain shared user data. Store the shadow copies on a separate physical disk.

D. Use Windows Server Backup to perform a daily backup to a remote network share.

Enable shadow copies for the volumes that contain shared user data. Store the shadow copies in the default location.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 75

Your network consists of an Active Directory domain. The domain controllers run Windows Server 2008

R2. Client computers run Windows 7.

You need to implement Encrypting File System (EFS) for all client computers. You want to achieve this goal while meeting the following requirements: ·You must minimize the amount of data that is transferred across the network when a user logs on to or off from a client computer. ·Users must be able to access their EFS certificates on any client computers. ·If a client computer's disk fails, EFS certificates must be accessible. What should you do?

A. Enable credential roaming. B. Enable roaming user profiles. C. Enable a Data Recovery Agent. D. Issue smart cards to all users.

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 76

You need to recommend an operating system for Node1 and Node2. The recommendation must meet the company's technical requirements.

Which operating system image should you install?

A. a full installation of Windows Server 2008 R2 Enterprise

B. a full installation of Windows Server 2008 R2 Standard

C. a Server Core installation of Windows Server 2008 R2 Enterprise D. a Server Core installation of Windows Server 2008 R2 Standard

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 77

You need to identify which operating system must be installed on the HyperV server in the new branch office.

Which operating system should you identify?

A. a Server Core installation of Windows Server 2008 R2 Enterprise B. a Server Core installation of Windows Server 2008 R2 Standard C. Windows Server 2008 R2 Enterprise D. Windows Server 2008 R2 Standard

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 78

You need to recommend a server build for the Web servers. Which server build should you recommend?

A. Class 1 B. Class 2 C. Class 3 D. Class 4

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 79

You need to recommend a solution for promoting the RODC in the new branch office. What should you include in the recommendation?

A. Active Directory snapshots B. an unattended answer file C. Install From Media (IFM) D. Answer ID D

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 80

You need to recommend a solution for improving the automated deployment of servers. The solution must meet the company's technical requirements. What should you include in the recommendation?

A. an offline domain join B. nativeboot

virtual hard disks (VHDs)

C. the Offline servicing of images D. the Online servicing of images

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 81

You need to recommend an IP addressing strategy for the client computers in the new sales office. What should you recommend implementing in the new sales office?

A. DHCP server roles

B. the DirectAccess feature

C. the Network Policy Server (NPS) role service D. the Remote Access Service role service

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 82

You need to recommend changes to the existing environment that meet the company's security requirements for the file server on the main campus. What should you recommend?

A. Deploy Network Policy Server (NPS) and create a network policy.

B. Deploy Print and Document Services and create a custom printer filter.

C. Deploy File Server Resource Manager (FSRM) and create a file classification rule.

D. Deploy Active Directory Rights Management Services (AD RMS) and create an AD RMS

rights policy template.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 83

You need to recommend a security strategy for WebApp2 that meets the company's application requirements.

What should you include in the recommendation?

A. Basic authentication and connection security rules B. Basic authentication and SSL

C. Digest authentication and connection security rules D. Digest authentication and SSL

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 84

You are evaluating whether to deploy HyperV. Which technical requirement is NOT met by a HyperV

deployment?

A. Allocate CPU resources between VMs. B. Simplify the management of all hardware.

C. Ensure that the VMs can connect to multiple VLANs.

D. Minimize the amount of administrative effort required to convert physical servers to VMs.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 85

You need to recommend a solution for configuring the Web servers. The solution must meet the company's technical requirements.

What should you include in the recommendations?

A. Active Directory Lightweight Directory Services (AD LDS) B. Failover Clustering C. HTTP redirection

D. IIS Shared Configuration

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 86

You need to recommend a solution for deploying App2. What should you recommend?

A. Deploy a new AppV package that contains App2. Stream the package to the client

computers of the 10 users.

B. Deploy a new MEDV workspace that contains App2. Deploy the workspace to the client

computers of the 10 users.

C. On an RD Session Host server in the branch office, install and publish App2 by using

RemoteApp.

Deploy the RemoteApp program as an MSI file.

D. On an RD Virtualization Host server in the branch office, create 10 Windows 7 VMs that

contain App2.

Configure the new VMs as personal virtual desktops.

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 87

You need to recommend a solution for the file servers in the branch offices that meets the storage requirements

What should you include in the recommendation?

A. Distributed File System (DFS) and accessbased enumeration (ABE) B. File Server Resource Manager (FSRM) quotas and file screens C. NTFS disk quotas and NTFS permissions

D. Services for Network File System (NFS) and offline files

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 88

You need to recommend a solution to ensure that users in the London office can access the graphics files in the main office. The solution must meet the company's business goals.

What should you recommend?

A. Configure the client computers to use BranchCache in Distributed Cache mode. B. Deploy a standalone Distributed File System (DFS) namespace. Configure a DFS

Replication group.

C. Deploy a domainbased Distributed File System (DFS) namespace. Configure a DFS

Replication group.

D. Deploy a BranchCache server that operates in Hosted Cache mode. Configure the client

computers to use the BranchCache server.

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 89

You need to recommend a solution for promoting the RODC in the new branch office. What should you include in the recommendations?

A. Implement the Windows Search service and implement a custom iFilter.

B. Implement File Server Resource Manager (FSRM) and configure file classifications. C. Implement Microsoft SharePoint Foundation 2010 and create a custom workflow. D. Implement a Distributed File System (DFS) namespace and configure folder targets.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 90

You need to recommend a solution to minimize the amount of time it takes for the legal department users to locate files in the Legal share. What should you include in the recommendation?

A. File Server Resource Manager (FSRM) B. Print and Document Services

C. Services for Network File System (NFS) D. Windows Search Service

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 91

You need to recommend a solution for managing all of the servers. The solution must meet the company's technical requirements.

What should you include in the recommendation?

A. Remote Server Administration Tools (RSAT) B. the Administration Tools Pack (adminpak.msi)

C. the Remote Desktop Gateway (RD Gateway) role service

D. the Remote Desktop Web Access (RD Web Access) role service

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 92

You need to recommend a strategy for managing the domain controllers in the branch offices that meets the company security requirements.

What should you include in the recommendation?

A. Configure Administration Role Separation.

B. Add the BranchAdmins group to the Domains Admins group. C. Add the BranchAdmins group to the Server Operators group.

D. Assign the permission for the domain controller computer objects to the BranchAdmins

group.

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 93

You need to recommend a strategy for using managed service accounts on the Web servers. How many managed service accounts should you recommend?

A. 1 B. 2 C. 3 D. 5

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 94

You need to identify which tool the help desk users must use to perform administrative tasks. Which tool should you identify?

A. RemoteApp

B. Remote Assistance C. Remote Desktop

D. Remote Server Administration Tools (RSAT)

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 95

You need to recommend a strategy to ensure that the administration of AD LDS is encrypted.

What should you include in the recommendation?

A. a server authentication certificate B. client authentication certificates C. Digest authentication

D. Windows Integrated authentication

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 96

You need to recommend a strategy for delegating administrative rights to Admin1. The strategy must support the company's planned changes. What should you include in the recommendation?

A. the Authorization Manager snapin on Node1 and Node2 B. the Authorization Manager snapin on the VMs

C. the Network Configuration Operators local group on each VM

D. the Network Configuration Operators local group on Node1 and Node2

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 97

You need to recommend a solution that enables User1 to perform the required actions on the HyperV server.

What should you include in the recommendation?

A. Active Directory delegation

B. Authorization Manager role assignment C. local security groups on the HyperV server D. local security groups on the VMs

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 98

You need to recommend an administrative solution for the local support technicians in the satellite

offices. The solution must meet the company's security requirements. What should you include in the recommendation?

A. Active Directory delegation B. Administrator Role Separation C. managed service accounts D. Restricted Groups

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 99

You need to recommend a strategy for delegating administration to the consulting firm. What should you recommend?

A. Create local user accounts. B. Create domain user accounts.

C. Create IIS Manager user accounts.

D. Implement Active Directory Lightweight Directory Services (AD LDS).

Answer: C

Section: (none)

Explanation/Reference:

QUESTION 100

You need to ensure that Admin1 can administer the Web servers to meet the company's technical requirements.

To which group should you add Admin1?

A. the Administrators local group on each Web server B. the Backup Operators domain local group

C. the Backup Operators local group on each Web server D. the Domain Admins global group

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 101

You need to recommend a solution for managing administrative rights for the branch office client computers. The solution must meet the company's technical requirements. What should you recommend configuring?

A. Account Policies by using GPOs

B. Local Users and Groups by using Group Policy preferences C. Restricted Groups by using GPOs

D. Security Options by using Group Policy preferences

Answer: B

Section: (none)

Explanation/Reference:

QUESTION 102

You need to recommend a strategy for managing Windows Firewall that meets the company's technical requirements.

What should you include in the recommendation?

A. domainbased Group Policy objects (GPOs) B. local Group Policy objects (GPOs) C. Starter Group Policy objects (GPOs)

D. System Starter Group Policy objects (GPOs)

Answer: A

Section: (none)

Explanation/Reference:

QUESTION 103

You need to configure Internet Explorer to meet the company's technical requirements. Which GPO or GPOs should you modify?

A. Default Domain Policy B. GPO1

C. GPO2 and GPO3 D. GPO4 and GPO5

Answer: D

Section: (none)

Explanation/Reference:

QUESTION 104

You need to recommend a solution for Group Policy that meets the company's technical requirements.

What should you recommend?

A. Create a Central Store. B. Enable folder redirection.

C. Modify the File Replication Service (FRS) settings for SYSVOL.

D. Configure SYSVOL to use Distributed File System (DFS) Replication.

本文来源：https://www.bwwdw.com/article/6wgr.html